Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/43a2d4b6-3f9d-30a4-b9cd-d44496d278e2.roa
File: 43a2d4b6-3f9d-30a4-b9cd-d44496d278e2.roa (raw, json)
Hash identifier: MtXehgNOa/NwhWrBIFKLut8+MHLzP6+wayExfyfx4fs=
Subject key identifier: 03:6B:7B:49:74:F9:4E:98:67:81:AF:1A:5F:C1:7D:7B:71:97:7E:A1
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848B73624390424BBDDB48F0880
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/43a2d4b6-3f9d-30a4-b9cd-d44496d278e2.roa
Signing time: Thu 30 Jan 2025 11:08:54 +0000
ROA not before: Thu 30 Jan 2025 11:08:54 +0000
ROA not after: Wed 30 Apr 2025 10:08:54 +0000
asID: 30036
IP address blocks: 173.31.40.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b7:36:24:39:04:24:bb:dd:b4:8f:08:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Jan 30 11:08:54 2025 GMT
Not After : Apr 30 10:08:54 2025 GMT
Subject: CN=00c06636-69e8-4cbe-ad4d-bdfb19f4e0eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9b:5d:e0:f4:58:37:45:1d:a9:d8:44:70:3e:
ff:da:82:fb:2d:68:22:b7:b4:4d:38:eb:81:a4:83:
21:9d:96:e1:43:2b:65:1d:90:77:25:c8:79:77:00:
01:69:21:60:1a:32:77:f1:95:e7:77:97:a5:48:af:
93:f2:bc:38:7d:27:57:d8:04:93:ce:b2:ea:ce:8e:
60:73:6b:57:a2:59:46:02:ec:52:b2:dd:ed:99:06:
11:27:bc:bb:6a:7d:ab:6f:38:61:03:40:03:f4:c0:
92:b7:f8:ec:d9:b8:1f:19:98:c7:eb:18:4f:ee:5f:
d9:d8:32:fe:b8:db:bd:53:cb:85:04:04:91:eb:23:
5a:19:b3:a4:77:56:e1:8f:24:d3:e4:9a:db:3c:1d:
a7:28:27:c9:b1:a2:85:6d:6a:f8:ec:33:e9:d5:2a:
f0:7a:7c:1d:55:af:90:34:75:d7:e6:31:a7:d5:45:
98:40:63:ba:5f:45:1e:2b:e3:cc:97:7b:20:fb:33:
e7:e4:99:b4:2b:61:bf:57:9b:7a:aa:40:c9:87:4d:
05:72:47:db:42:fc:6d:39:91:8d:b8:e2:c7:db:4e:
5b:42:be:8b:a4:ab:26:67:72:b2:d1:fd:16:c3:3b:
34:f6:77:b7:4e:ad:78:bf:a0:5c:2c:7b:93:60:32:
f1:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:6B:7B:49:74:F9:4E:98:67:81:AF:1A:5F:C1:7D:7B:71:97:7E:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/43a2d4b6-3f9d-30a4-b9cd-d44496d278e2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.31.40.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:1f:bd:63:33:d2:48:83:5e:9c:c8:a1:49:5d:fb:50:ad:30:
3b:b5:2e:54:a7:7a:ad:39:b0:a1:8c:f1:a8:27:bb:bc:6f:40:
73:6e:f1:18:f7:0a:aa:bb:11:ef:a3:8a:94:a5:a1:9c:39:f0:
9c:80:22:21:e7:a1:b5:56:bb:74:9c:07:62:83:83:45:5d:ec:
22:79:ae:76:d2:72:27:91:50:5b:ad:34:12:c4:66:18:37:1a:
2f:14:ef:52:37:c3:21:be:32:ad:88:13:53:fd:c8:6c:8a:3d:
2e:2d:70:20:8a:9c:6a:7f:8b:33:f4:18:3f:52:0f:a5:2f:34:
f4:2e:cd:3f:24:81:f1:36:f0:13:f1:0f:78:7c:cd:10:e3:5c:
09:c0:fd:43:cd:35:86:06:e6:bd:ad:ac:34:32:35:98:bd:dc:
99:6f:1f:a9:67:1c:9d:43:09:22:21:f3:e9:da:68:08:e2:ad:
26:62:6a:40:ea:57:b6:61:80:35:ac:7f:0f:e4:56:f2:05:82:
34:51:0c:38:c6:6a:41:5b:da:f7:ab:88:ed:ad:7a:23:66:ea:
3e:64:40:57:b9:cf:26:3b:4b:ba:6b:ec:c7:b1:0b:a9:11:9d:
9f:5c:73:1e:07:61:2b:03:6e:8f:6b:a9:2d:57:d9:0d:ed:6f:
6b:14:b5:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:53:04 2025 by rpki-client